X-Git-Url: http://git.linux-vserver.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=doc%2Fconfiguration.xml;h=e0a74bda5e878fbc909db0ffa5a282834fb60b39;hb=2ad38cf52b5bbbba20f7bba249bcd0ba1dfa219c;hp=ed7559091c5ff41a82f80dc217a62d89ae8f9b95;hpb=2bda779c80eed2b973bb6a13e35c49fd549e2a86;p=util-vserver.git diff --git a/doc/configuration.xml b/doc/configuration.xml index ed75590..e0a74bd 100644 --- a/doc/configuration.xml +++ b/doc/configuration.xml @@ -37,14 +37,20 @@ the 'barrier' attribute. Else, common chroot(2) exploits are possible. - + -Enable namespace cleanup globally. It can be overridden for a single vserver -by setting the nonamespace-cleanup flag +Disable namespace cleanup globally. It can be overridden for a single vserver +by setting the namespace-cleanup flag there. + + +List of paths to skip during namespace cleanup. + + + Path of the vserver run reverse directory. This directory contains @@ -61,7 +67,7 @@ a vserver specific setting. /vservers/.pkg - + The default apt.conf which is going to be used. It is overridden by distribution specific configuration file. @@ -83,6 +89,33 @@ from this uri and install it at a temporary place. + + + 'x' is an arbitrary name, replace it with e.g. device names + + When this file exists, the device can be opened + + + When this file exists, the device can be created (if the guest has CAP_MKNOD) + + + +When this file exists, target will +have to exist as well and opening the device will in fact open the target device + + + + This file will let you specify unimplemented flags manually + + + Contains the name of a device node + + + Contains the device node of the target node to open instead of the device when remap is set + + + + @@ -190,6 +223,14 @@ operation will fail. Most tools assume 'on' as the default value. + + + + +When this file exists, vlogin isn't used on vserver <guest> enter. + + + @@ -338,19 +379,25 @@ the vserver is stopped, this can be a dangling symlink. -[experimental; name is subject of possible change] Contains the system capabilities. See +Contains the system capabilities. See lib/bcaps-v13.c for possible values. -[experimental; name is subject of possible change] Contains the -context capabilities. See lib/ccaps-v13.c for possible values. + + +Contains the network capabilities. See lib/ncaps-net.c +for possible values. + + @@ -368,22 +415,24 @@ the 'barrier' attribute. Else, common chroot(2) exploits are possible. - + -Overrides the global namespace-cleanup flag and disables +Overrides the global nonamespace-cleanup flag and enables namespace cleanup for the current vserver. - + -Enable namespace cleanup for the current vserver. +List of paths to skip during namespace cleanup. This overrides the global +namespace-cleanup-skip +file. - + -[experimental; name is subject of possible change] Contains the +[deprecated; use sched instead] Contains the scheduler parameters, one per line. The Hard CPU limit uses a mechanism called a Token Bucket. the @@ -493,7 +542,7 @@ The new process and its children will share a common Limit the number of process in the vserver according to ulimit setting. Normally, ulimit is a per user thing. -With this flag, it becomes a per vserver thing. +With this flag, it becomes a per vserver thing. @@ -509,6 +558,13 @@ Apply the current ulimit to the whole context --> + + +Contains a network flag per line. See lib/nflags-net.c +for possible values. + + Contains the context which shall be used for the vserver. @@ -815,7 +871,7 @@ The name of the current vserver. Repository of initialize like scripts. Before executing the script, the configuration directory will be made the working directory. - + See initialize. @@ -856,7 +912,7 @@ The name of the current vserver. Repository of prepre-start like scripts. Before executing the script, the configuration directory will be made the working directory. - + See prepre-start. @@ -898,7 +954,7 @@ The name of the current vserver. Repository of pre-start like scripts. Before executing these scripts, the vserver root directory will be made the working directory. - + See pre-start. @@ -982,7 +1038,7 @@ The name of the current vserver. Repository of pre-stop like scripts. Before executing the script, the vserver root directory will be made the working directory. - + See pre-stop. @@ -1180,24 +1236,23 @@ interface will be executed. A directory with ulimits. Possible resources are cpu, data, fsize, -locks, memlock, nofile, nproc, rss and/or stack. This configuration -will be honored for kernel 2.4 only. - +locks, memlock, nofile, nproc, rss and/or stack. + A file which contains the hard- and soft-limit of the given resource in the first line. The special keyword 'inf' is recognized. - + -A file which contains the hard- of the given resource in the first +A file which contains the hard-limit of the given resource in the first line. The special keyword 'inf' is recognized. - + -A file which contains the soft- of the given resource in the first +A file which contains the soft-limit of the given resource in the first line. The special keyword 'inf' is recognized. @@ -1206,30 +1261,31 @@ line. The special keyword 'inf' is recognized. A directory with resource limits. Possible resources are cpu, fsize, -data, stack, core, rss, nproc, nofile, memlock, as and locks. This +data, stack, core, rss, nproc, nofile, memlock, as, locks, msgqueue, +nsock, openfd, anon, shmem, semary, nsems and dentry. This configuration will be honored for kernel 2.6 only. - + A file which contains the hard- and soft-limit of the given resource in the first line. The special keyword 'inf' is recognized. - + -A file which contains the hard- of the given resource in the first +A file which contains the hard-limit of the given resource in the first line. The special keyword 'inf' is recognized. - + -A file which contains the soft- of the given resource in the first +A file which contains the soft-limit of the given resource in the first line. The special keyword 'inf' is recognized. -A file which contains the guaranted minimum of the given resource in +A file which contains the guaranteed minimum of the given resource in the first line. The special keyword 'inf' is recognized. @@ -1280,6 +1336,18 @@ tools and can *not* be modified. + + + 'x' is an arbitrary name, replace it with e.g. integers + + The sysctl setting + + + The value + + + + The name of the cpuset for this vserver @@ -1300,5 +1368,71 @@ tools and can *not* be modified. When this file exists, the cpuset will be assumed to exist already + + + + The initial amount of tokens to put in the bucket + + + The minimum amount of tokens required to unhold the context + + + The bucket's size + + + Amount of tokens to add each interval + + + The interval between refills of the bucket + + + Bias added to priorities calculated within the guest (result is clamped to -20/+19) + + + Amount of tokens to add each interval2 when advancing idle time + + + The interval between refills of the bucket when advancing idle time + + + When this file exists, advancing idle time is activated + + + This directory contains per-CPU and/or per-bucket specific settings. Remember to set the cpu-id file. All CPUs inherit the global settings. + + The initial amount of tokens to put in the bucket + + + The minimum amount of tokens required to unhold the context + + + The bucket's size + + + Amount of tokens to add each interval + + + The interval between refills of the bucket + + + Bias added to priorities calculated within the guest (result is clamped to -20/+19) + + + Amount of tokens to add each interval2 when advancing idle time + + + The interval between refills of the bucket when advancing idle time + + + When this file exists, advancing idle time is activated + + + The CPU to apply these settings to + + + The bucket to apply these settings to + + +